CVE-2025-15070

Summary

Exposure of Sensitive Information to an Unauthorized Actor, Missing Authorization vulnerability in Gmission Web Fax allows Authentication Abuse.

This issue affects Web Fax: from 3.0 before 3.0.1

Affected Software

VendorProductVersion RangeStatus
GmissionWeb Fax3.0 < 3.0.1affected

Weaknesses

  • CWE-200: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
  • CWE-862: CWE-862 Missing Authorization

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References